+44 7538 031949

Privacy Policy

Last Updated on 27 September 2026

OVERVIEW

This Privacy Policy explains how Online CEO Ltd ("we", "us", "our") collects, uses, and protects your personal information when you visit our websites, register for any of our trainings, events, or programmes, apply to work with us, sign up to our communications, or otherwise interact with us.

We are the data controller responsible for your personal data.

CONTACT DETAILS

  • Data controller: Online CEO Ltd (registered in England and Wales, company number 15044772)
  • ICO registration number: ZC253783
  • Registered address: 4 Kensington Court, Wilmslow, Cheshire, SK9 5DA
  • Email: [email protected]

1. WHAT INFORMATION WE COLLECT

Information you give us:

  • Name
  • Email address
  • Phone number
  • Business information you give us in an application, such as your company name and website, what your business sells, your ideal customer, your revenue range, your team, and your goals
  • Any other details you submit through our registration or application forms or when you message us.

Information we collect automatically when you use the site:

  • Device and browser type, operating system
  • IP address and approximate location
  • Pages visited, time on page, referring website, and how you interact with the site
  • Cookie and similar tracking data (see the Cookies section below).

We do not knowingly collect data from anyone under 18. Our trainings and programmes are intended for adults.

2. HOW AND WHY WE USE YOUR INFORMATION (LAWFUL BASES)

Under UK GDPR we must have a lawful basis for using your personal data. We rely on:

  • Consent: when you opt in to register for a training, event, or programme and to receive marketing emails and messages from us. You can withdraw consent at any time.
  • Steps before entering into a contract, and our legitimate interests in assessing applications from businesses: when you apply to work with us (including on behalf of your company), we use the information in your application to assess whether we are the right fit and to prepare for any strategy call or proposal.
  • Legitimate interests: to operate, secure, and improve our website and services, to understand how our marketing performs, and to contact registered attendees about the training, event, or programme they signed up for. We balance this against your rights.
  • Legal obligation: where we must keep records or respond to lawful requests.

We use your information to:

  • Register you for a training, event, or programme and send you joining details, reminders, and replays
  • Review your application and assess whether we can work together
  • Send you marketing emails, offers, and related content (where you have consented)
  • Respond to your enquiries
  • Measure and improve our marketing and website performance
  • Keep our website secure and prevent fraud or abuse
  • Comply with our legal and regulatory obligations.

3. MARKETING COMMUNICATIONS

If you register, or tick the marketing box on one of our application forms, you may receive marketing emails and messages about our trainings, events, products, and services. Every marketing email includes an unsubscribe link, and you can opt out at any time by clicking it or emailing us. Opting out of marketing will not stop essential service messages about a training, event, or programme you have actively registered for.

4. COOKIES AND TRACKING

We use cookies and similar technologies on some of our websites. Where a site uses non-essential cookies, a cookie banner appears when you first visit and lets you Accept All or Reject Non-Essential cookies. Non-essential cookies (including analytics and marketing or advertising cookies) are only set after you consent.

Categories we use:

  • Essential cookies: required for the site to function and stay secure, for example the short-lived security cookie our hosting provider Cloudflare sets to tell real visitors from automated bots (it expires after about 30 minutes) and, on sites with a cookie banner, the cookie that remembers your choice. These do not require consent.
  • Analytics cookies: help us understand how visitors use the site so we can improve it.
  • Marketing or advertising cookies: used to measure and improve our advertising and to show relevant ads.

On sites with a cookie banner, you can change or withdraw your cookie consent at any time by clearing the site cookies in your browser and reloading the page, which brings the banner back. You can also block or delete cookies through your browser settings, though some essential features may then not work.

Marketing and analytics cookies (on sites that use them, these load only if you click "Accept All" on that site's cookie banner):

  • Meta Pixel (Meta Platforms Ireland Ltd): measures the performance of our Facebook and Instagram advertising and helps us show relevant ads.
  • Microsoft Clarity (Microsoft Corporation): anonymised session and heatmap analytics showing how visitors use the page so we can improve it.

These do not load until you give consent. You can withdraw consent at any time by clearing your browser's cookies and site data.

Cookie-free measurement and font delivery (these do not use cookies and run without a cookie banner):

  • Cloudflare Web Analytics (Cloudflare, Inc.): our websites are delivered through Cloudflare as part of our hosting, and a small script records basic information about page visits, such as the page viewed, the referring site, your country, device type and browser, and how quickly the page loaded, so we can see how our pages perform overall. It does not use cookies or local storage for this, does not track you across visits or websites, and does not build a profile of you. You can object at any time by blocking static.cloudflareinsights.com with a free browser content blocker, or by emailing us (see section 8, Your Rights). Cloudflare's separate security cookie is described under essential cookies above.
  • Google Fonts (Google LLC): the fonts on our pages are loaded from Google, which receives your IP address so it can deliver them.

5. WHO WE SHARE YOUR INFORMATION WITH

We do not sell your personal data. We share it only with:

  • Service providers who help us run the business, such as our email and CRM platform, our website and form host (HighLevel), our hosting and content delivery provider (Cloudflare), our font provider (Google Fonts), our webinar or training platform, and analytics and advertising providers where you have consented.
  • Professional advisers (lawyers, accountants) where necessary.
  • Authorities or regulators where we are legally required to.

Some of these providers may process data outside the UK or EEA. Where they do, we rely on appropriate safeguards (such as UK adequacy regulations or Standard Contractual Clauses) to protect your data.

6. HOW LONG WE KEEP YOUR INFORMATION

We keep your personal data for as long as you remain subscribed to our communications or have an ongoing relationship with us, and until you ask us to delete it or withdraw your consent. We may keep certain records for longer where we are required to for legal, tax, or regulatory reasons. If you apply to work with us and we do not proceed, we keep your application so we can reconsider it if you apply again or your circumstances change, and we delete it within 24 months of receiving it. If you also ticked the marketing box, we keep your name and contact details for marketing until you unsubscribe. You can ask us to delete your data at any time (see your rights below).

7. HOW WE PROTECT YOUR INFORMATION

We take reasonable technical and organisational measures to keep your data secure, including restricted access and use of reputable, secured third-party platforms. No method of transmission over the internet is 100 percent secure, but we work to protect your information and to handle any breach in line with our legal obligations.

8. YOUR RIGHTS

Under UK GDPR you have the right to:

  • Be informed about how we use your data (this policy)
  • Access a copy of the data we hold about you (a Subject Access Request, which is free)
  • Have inaccurate data corrected
  • Have your data erased ("right to be forgotten")
  • Restrict or object to our processing, including objecting to direct marketing at any time
  • Data portability (receive your data in a usable format)
  • Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email us at [email protected]. We will respond within one month. There is no fee for a standard request.

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Helpline: 0303 123 1113

We would appreciate the chance to address your concerns first, so please consider contacting us before approaching the ICO.

9. THIRD-PARTY LINKS

Our website may link to other websites and social media platforms. This policy does not cover those sites. We are not responsible for their content or privacy practices, and we encourage you to read their privacy policies before sharing any information with them.

10. CHANGES TO THIS POLICY

We may update this policy from time to time. The latest version will always be on this page with the "Last updated" date at the top. Your continued use of the site after changes are posted means you accept the updated policy.